政府与企业如何建立风险管理自动化审计机制.ppt

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * It seems that at mid-2003, in Australia, NZ and South Africa, KnowRisk is the only R.M. package that has shown that it can work at the operational coal-face. It can be used by every-day staff in several ways, to work through the risk process themselves, using the Methods Steps and accompanying guide-notes (all configurable by the user), or simple data entry screen for making updates about e.g. progress of the action plan. No-one customer users KR in the same way: some have started out with a general operational framework, some with the strategic risks, while others have just procured KnowRisk for its audit / controls self assessment module. At Aug 03 several customers are building their compliance frameworks in KR, a major corporation is building its BCP, while several have also started to manage their insurance program in KR. The default KR has a number of existing fields and pre-defined processes for building a risk framework. The options that exist, that includes a purely subjective assessment, to semi or fully quantifiable values, that span from inherent to residual to target risk, and aggregate up the risk molecule to a profile level, and from profile to profile, give an unparalled way of developing a risk mngt framework that will become more accurate and relevant over time. We ought to be selling the strength of the“core methodology” of KnowRisk, as there is no real short cut to the depth and breadth of data that is required. However, there are options that can narrow down what part of the process gets dealt with first. CorProfit has a leadership in all of this. * It seems that at mid-2003, in Australia, NZ and South Africa, KnowRisk is the only R.M. package that has shown that it can work at the operational coal-face. It can be used by every-day staff in several ways, to work through the risk process themselves, using the Methods Steps and accompanying guide-notes (all configurabl